for the latter part of your question, yeah, it's either using

ListResources

or

BulkCheckPermission

depending on whether the number of things the user has access to is much larger than the number of things in a filtered page or vice versa